Extension Auditor
Extension Auditor
Sign Up

HighGround Email Plugin

ID: pialcfacfddohgedacaoonpknplgnikk

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
1.3.0
Size
0.32 MB
Rating
5.0/5
Reviews
1
Users
5
Type
Extension
Updated
Aug 31, 2018
Category
1_communication
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
http://www.highground.comView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
5

HighGround inbox plug-in for requesting performance feedback, giving coaching tips and recognizing colleagues for a job well done.

The most competitive companies give employees opportunities for feedback in the context of their everyday work, from the people they work with most often and within the systems they already use. HighGround’s Email Plugin lives seamlessly where employees spend much of their time – in their inboxes. Lifting up colleagues for positive behaviors, celebrating wins and exchanging feedback is a simple, seamless and natural part of everyday workflow when HighGround is integrated into email. As inbound emails are received, users can employ the HighGround extension to solicit feedback, provide coaching notes and give recognitions in real-time. This extension includes full Recognition and Feedback functionality. Just like the application, any feedback or recognition actions will trigger in-app and email notifications.

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 15% increase: Older manifest version lacks modern security controls
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
background
Permission
Medium
This permission allows continuous background operation. Rated Medium because it can perform actions without user awareness, consume system resources, and maintain persistent connections.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
*://*.googleapis.com/*
Permission
Unknown
No classification available for this permission.
*://*.google.com/*
Permission
Unknown
No classification available for this permission.
*://*.highground.com/*
Permission
Unknown
No classification available for this permission.
URLs
17
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
*.google.com-https://*.google.com
*.highground.com;-https://*.highground.com;
www.w3.org/1999/02/22-rdf-syntax-nshttp://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com/tiff/1.0/http://ns.adobe.com/tiff/1.0/
app.highground.com-https://app.highground.com
accounts.google.com/o/oauth2/authhttps://accounts.google.com/o/oauth2/auth?
www.googleapis.com/oauth2/v2/userinfohttps://www.googleapis.com/oauth2/v2/userinfo?access_token=
www.googleapis.com/auth/userinfo.profilehttps://www.googleapis.com/auth/userinfo.profile
www.googleapis.com/auth/userinfo.emailhttps://www.googleapis.com/auth/userinfo.email
Showing 1 to 10 of 20 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.3.0
Latest
0.32 MB
Malicious
—
316e1d482d5936ea5c15c013ade1fc417837135f1a75f7659feb49a1bd749bec
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In